i
目 录
软件类 FAQ················································································································································· 1
如何查看当前运行的系统版本信息? ········································································································· 1
Agent 支持哪些操作系统 ···························································································································· 1
如何对 Agent 进行启动、停止、重启、查看状态? ··················································································· 2
业务功能类 FAQ ········································································································································· 2
忘记 Web 控制台 admin 密码,如何处理? ································································································ 2
普通用户忘记密码该如何处理? ················································································································· 2
多次输入错误密码,帐号被锁定该如何处理? ··························································································· 2
Web 管理界面显示 agent 离线如何排查? ································································································· 3
ssh 无法登录服务器主机,提示 ssh_exchange_identification: read: Connection reset by peer,但是更换
客户端 IP 后可以登录? ······························································································································ 3
agent 如何进行自身保活? ························································································································· 3
暴力破解封禁时间? ··································································································································· 3
多次暴力破解的 IP 未被封禁? ··················································································································· 3
异地登录判断策略? ··································································································································· 3
使用非白名单账号测试异地登录,为什么在异常账号记录中没有记录? ··················································· 4
登录管理,开启非白名单登录记录是什么意思? ······················································································· 4
登录管理,是否加白全部内网 IP 是什么意思? ························································································· 4
我在异常检测设置了文件监控目录,然后为该目录下的文件增加 s 位,为什么在文件提权记录中没有展示?
··································································································································································· 4
漏洞管理->自定义漏洞扫描,选择 Windows,补丁安装情况为已安装,并输入 KB 编号,我的机器上没有
安装这个 KB,但是扫描结果显示已修复? ································································································ 4
如何手动清理 Agent 的 iptables 规则? ······································································································ 4
/opt/secAgent/logs 下的日志是否可以删除? ····························································································· 4
恶意进程快速扫描和实时监控的目录范围? ······························································································· 5
页面报错,并有一串字符串的错误码,这个怎么处理? ············································································ 5
评论